Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120/ddc41c27-bbbb-3094-9a71-1ac02a380e44.roa
File:                     ddc41c27-bbbb-3094-9a71-1ac02a380e44.roa (raw, json)
Hash identifier:          ZsxrhTIiYysyD1ZFu7+ZMrkLkGy/+/XSN9wsCfXeKEs=
Subject key identifier:   DE:9B:FE:CB:EC:FF:F9:FD:D2:45:06:4A:CF:C3:86:09:B7:2A:93:77
Certificate issuer:       /CN=4550770a-2981-4fa9-bb7d-de9c7306d120
Certificate serial:       010D0C9F4328584EEA878D3E9733E01691ADCE80
Authority key identifier: 70:EB:7A:F3:32:C8:A8:D7:7D:BA:C5:54:24:81:B9:3C:18:48:A7:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120/ddc41c27-bbbb-3094-9a71-1ac02a380e44.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     18602
IP address blocks:        198.13.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120/4550770a-2981-4fa9-bb7d-de9c7306d120.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120/4550770a-2981-4fa9-bb7d-de9c7306d120.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:8d:3e:97:33:e0:16:91:ad:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4550770a-2981-4fa9-bb7d-de9c7306d120
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=28dd2279-1350-4ac5-b68d-c13f8123e99b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c0:50:eb:7d:c0:db:54:1a:eb:17:08:62:4c:
                    0e:d2:c9:f7:12:f3:bc:4f:ca:aa:cd:32:f4:e6:b3:
                    16:31:5c:b0:0c:6c:bd:3c:62:34:50:98:e7:bf:1c:
                    d7:71:e8:5f:20:ef:68:01:99:6f:33:69:f5:3f:5d:
                    b4:7e:9f:06:88:8c:03:42:5a:c9:a2:61:2f:9b:14:
                    a8:41:34:a1:a2:9c:a8:f1:20:3f:97:9a:68:a4:4e:
                    7d:92:e5:bd:b9:b3:20:83:5e:66:4a:91:3f:dd:ea:
                    9e:bb:a4:17:e4:00:6b:84:05:10:00:6c:55:84:b2:
                    75:e4:4b:61:19:c9:12:29:f9:d2:72:7d:d0:23:72:
                    91:88:77:b7:b1:e1:38:60:78:09:18:33:17:a4:75:
                    1a:b7:44:dc:31:a9:f3:cc:c6:3b:9d:3e:45:42:ec:
                    9a:ca:1c:17:0d:05:70:ff:42:19:41:20:de:dd:36:
                    e8:a0:b5:ab:f0:54:a2:ea:95:05:97:66:5a:02:56:
                    6f:d1:6a:88:1b:f0:68:d2:17:e5:81:74:f9:75:e4:
                    0c:64:15:78:4e:5d:43:25:3f:01:36:e4:b4:6c:e0:
                    ee:29:b6:ff:68:61:ad:8e:54:41:56:af:7e:5c:d4:
                    5a:36:02:e8:a0:30:22:dc:11:f1:22:1f:59:95:eb:
                    aa:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9B:FE:CB:EC:FF:F9:FD:D2:45:06:4A:CF:C3:86:09:B7:2A:93:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120/ddc41c27-bbbb-3094-9a71-1ac02a380e44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120/4550770a-2981-4fa9-bb7d-de9c7306d120.crl

            X509v3 Authority Key Identifier:
                keyid:70:EB:7A:F3:32:C8:A8:D7:7D:BA:C5:54:24:81:B9:3C:18:48:A7:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4550770a-2981-4fa9-bb7d-de9c7306d120.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.13.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:ab:90:04:5d:46:c6:96:bf:88:21:f3:4c:d3:d4:60:9c:b1:
         79:2b:d1:98:3a:df:45:25:a8:d5:2c:38:0f:6d:55:f2:c3:94:
         2f:c2:0a:93:9b:7c:27:5e:19:da:bf:4a:92:76:be:ca:dc:27:
         b1:2d:72:ab:0a:ad:2b:69:c1:9b:ae:28:02:c0:8f:a6:49:4b:
         67:c1:e3:51:5f:fb:76:a2:12:a0:2e:c0:0e:e9:bb:9f:2f:40:
         5c:fd:62:e8:f8:f1:44:72:29:d4:44:23:e0:7b:85:da:6d:80:
         81:31:1a:0d:84:3f:18:9a:a0:a1:98:29:01:91:78:0b:57:39:
         27:00:ce:07:30:e2:23:a8:e6:8f:00:bf:65:fd:35:65:c5:c0:
         79:2c:0d:38:b7:10:e3:f4:3d:d6:a8:a2:78:d4:90:95:59:09:
         ff:ff:7c:41:bb:ad:01:cb:9b:18:15:0f:f8:24:6a:09:69:93:
         9e:46:f8:d1:fa:d2:33:16:f6:4b:28:2e:e6:91:8d:df:ec:9f:
         5c:b1:e1:b3:c4:6b:e5:1f:02:cc:bf:fc:50:6d:21:f6:4d:d9:
         61:04:00:52:2d:d5:aa:bc:b7:c0:2a:c8:6f:05:6c:a9:90:b3:
         47:40:ae:e6:ef:70:99:15:e3:52:28:00:14:32:a2:5b:ae:20:
         7d:20:6c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:42:58 2026 by rpki-client